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Abstract 

L. K. Grover's search algorithm in quantum computing gives an optimal, square-root speedup 
in the search for a single object in a large unsorted database. In this paper, we expound Grover's 
algorithm in a Hilbert-space framework that isolates its geometrical essence, and we generalize 
it to the case where more than one object satisfies the search criterion. 
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1 Introduction 



A quantum computer (QC) is envisaged as a collection of 2-state "quantum bits", or qubits 
(e.g., spin 1/2 particles). Quantum computation does calculations on data densely coded in the 
entangled states that are the hallmark of quantum mechanics, potentially yielding unprecedented 
parallelism in computation, as P. Shor's work on factorization jl^, |ll[ proved in 1994. Two 
years later, L. K. Grover |^ showed that for an unsorted database with N items in storage, it 
takes an average number of 0{^/N) searches to locate a single desired object by his quantum 
search algorithm. If is a very large number, this is a significant square-root speedup over 
the exhaustive search algorithm in a classical computer, which requires an average number of 
■^^ji searches. Even though Grover's algorithm is not logarithmically fast (as Shor's is), it has 
been argued that the wide range of its applicability compensates for this Furthermore, the 
quantum speedup of the search algorithm is indisputable, whereas for factoring the nonexistence 
of competitively fast classical algorithms has not yet been proved |^ . 

Grover's original papers |, § deal with search for a single object. In practical applications, 
typically more than one item will satisfy the criterion used for searching. In the simplest 
generalization of Grover's algorithm, the number of "good" items is known in advance (and 
greater than 1). Here we expound this generalization, along the lines of a treatment of the 
single-object case by Farhi and Gutmann j^. Appendix] that makes the Hilbert-space geometry 
of the situation very clear. 

The success of Grover's algorithm and its multiobject generalization is attributable to two 
main sources: 

(i) the notion of amplitude amplication; and 

(ii) the dramatic reduction to invariant subspaces of low dimension for the unitary operators 
involved. 

Indeed, the second of these can be said to be responsible for the first: A proper geometrical 
formulation of the process shows that all the "action" takes place within a two-dimensional, 
real subspace of the Hilbert space of quantum states. Since the state vectors are normalized, 
the state is confined to a one-dimensional unit circle and (if moved at all) initially has nowhere 
to go except toward the place where the amplitude for the sought-for state is maximized. This 
accounts for the robustness of Grover's algorithm — that is, the fact that Grover's original 
choice of initial state and of the Walsh-Hadamard transformation can be replaced by (almost) 
any initial state and (almost) any unitary transformation |^, |^. 

The notion of amplitude amplification was emphasized in the original works |8j of Grover 
himself and in those of Boyer, Brassard, Il0yer and Tapp and Brassard, Il0yer and Tapp 
(See also [0, If.) Dimensional reduction is prominent in the papers by Farhi and Gutmann and 
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Jozsa y]. We applied dimensional reduction to multiobject search independently of references 
1^ and Q and later learned that the same conclusions about multiobject search (and more) 
had been obtained there in a different framework. (We modestly suggest that our framework is 
clearer.) 

The rest of the paper is divided into two parts. In §2, we reformulate the original Grover 
algorithm, and in §3, a multiobject search algorithm is studied. 

2 Introduction to Grover's Algorithm 

In this section, we review Grover's algorithm for searching a single element in an unsorted 
database containing N ^ 1 items, following This proof is presented in a way that makes 
possible the generalization of the algorithm to perform multiobject search in an unstructured 
database. 

Grover treated the following abstract problem: We are given a Boolean function /(a), = 1, 
2, . . . , N, which is known to be zero for all a except at a single point, say at a ~ w, where 
f{w) — 1. The problem is to find the value w. (The function is an "oracle" or "black box": all 
we know about it is its output for any input we care to insert.) On a classical computer we have 
to evaluate the function times on average to find the answer to this problem. In contrast, 
Grover's quantum algorithm finds w in 0{^/N) steps. 

The quantum-mechanical statement of the problem is that given an orthonormal basis 
{ I a) : a = 1, 2, . . . , N} we want to single out the basis element | w) for which f{w) — 1. (More 
concretely, each | a) is to be an eigenstate of the qubits making up the QC. If = 2", then n 
qubits will be needed.) At t — 0, we prepare the state of the system \ ip) in a superposition of 
the states { | a)}, each with the same probability: 



By the Gram-Schmidt construction we extend | w) to an orthonormal basis for the subspace 
spanned by | w) and | s). That is, we introduce a normalized vector | r) orthogonal to | w). 




(2.1) 




(2.2) 



and find that the initial state has the representation 




(2.3) 



Following Grover, we now define the unitary operator of inversion about average, 



Is=I-2\s){s\. 



(2.4) 
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Notice that the only action of this operator is to flip the sign of the state | s); that is, Is\s) = — | s) 



but Is\v) — \v) if {s\v) — 0. Using (2.3) we write Is as 



l-^){\r){r\-\w){w\)-2^^^^i\r){w\ + \w){r\ 



(2.5) 



In other words, with respect to the orthonormal basis the operator Ig is represented by the 
orthogonal (real unitary) matrix 



N 

N 



Similarly, the operator 1^ is defined by 



1 



-2 • 



N 
2 

1 

TV 



I^^I-2\w)(w\ 



(2.6) 



and satisfies /„ 



= — \w). The crucial fact is that in terms of the oracle function /, 

/^|a) - (-l)^'(")|a) (2.7) 

for each | a) in the original basis for the full state space of the QC. Therefore, to execute the 
operation one does not need to know w; one only needs to know /. (And conversely, being 
able to execute /„, does not mean that one can immediately determine w; \/N steps will be 
needed.) 

A "Grover iteration" is the unitary operator U = —Iglw ■ This product can be calculated 
easily in either the bra-ket or the matrix formalism. In particular, for the transition element 
(w\U\ s) we obtain 



{w\U\s) = {w\ 



^"^) J+ ^^^^ (|^)(r|-|r)(u;|) 



1-1)^ + 2(1 



-) — 



(2.8) 



The fact that the matrix element {w \ U \ s) is nonzero can be used to reinforce the probability 
amplitude of the unknown state \ w). If we use U as our unitary search operation, then after 
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ni ^ 1 trials the value (w I U^' 



can be evaluated as follows: 



Hc/"» = [i 0] 



[1 0] 



N N 



-2 



N 



2 

1 

N 



- m 


1 








In ~i 




L V J 



[1 0] 



cos 9 sin 9 
— sin 9 cos 9 



cos sin m0 

— sin m9 cos m0 



1 



N 



TV- 1 



sm 

AT 



N 



TV- 1 



TV 



iV 



cos m9 - 



AT- 1 
iV 



sin m9, 



or 



(u;|[/"|s) =cos(m6'-a), 



a = cos 



iV 



Setting CQS^ {ra9 — a) = 1, we can maximize the amplitude of C/™|s) in \w)] thus 



- a = 0, 
a 

m ^ — 



(If no integer satisfies this equation exactly, take the closest one.) When N is large, 



a « |, from ( p.lOD we obtain 



iV. 



(2.9) 



(2.10) 



/TV' 



(2.11) 



2/ vvTvy 4 

Therefore, after m = 0{^/N) trials the state | w) will be projected out, which is precisely 
Grover's result. By observing the qubits, we will learn w. By constructive interference, we have 



constructed \ w)\ (Since m only approximately satisfies (2.10), there is a small chance of getting 
a "bad" w. But because evaluating f{w) is easy, in that case one will recognize the mistake and 
start over.) 



3 Generalization of Grover's Algorithm to Multiobject 
Search 



Here we generalize Grover's search algorithm in its original form [|6|, |7|] to the situation where 
the number of objects satisfying the search criterion is greater than 1. 

Let a database {wi | i = 1,2, . . . ,iV}, with corresponding orthonormal eigenstates {\wi) : 
1 = 1,2,... , iV} in the QC, be given. Let / be an oracle function such that 



1, j = l,2,...,^, 

J =£+1,^ + 2,. 
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Here the I elements \wj | 1 < i < ^} are the desired objects of search. (To avoid introducing 
another layer of subscripts, we pretend in this theoretical discussion that these good objects 
are the first I items in the list. In a real search application they would appear in the list in 
random order; in other words, all N items Wi are subjected to some unknown permutation, 
which we do not indicate explicitly.) Let 7i be the Hilbert space generated by the orthonormal 
basis B = {l^j) | j = 1, . . . , iV}. Let L — span{|wj) | 1 < j < be the subspace of H. spanned 
by the vectors of the good objects. 

Define a linear operation in terms of the oracle function / as follows: 



/l|u;,> = (-1)^(-^)K-), j = 1,2. 



,iV. 



(3.1) 



Then since /l is linear, the extension of 1l to the entire space 7i is unique, with an "explicit" 
representation 



'J 1 1 



(3.2) 



where / is the identity operator on 7Y. Ij^ is the operator of rotation (by tt) of the phase of the 



subspace L. Note again that the explicitness of (3.2) is misleading because explicit knowledge 



of {\w-j) I 1 < j < ^} in (p.2|) is not available. Nevertheless, (3.2) is a well-defined (and unitary) 



operator on Ti because of (3.1). (Unitarity is a requirement for all operations in a QC.) 
We now again define \s) as 



1 ^ 1 ^ 



N 



(3.3) 



where now 



As before, we use 



|r) 




= 7-2|s)(s|. 



(3.4) 



Note that Is in (3.4) is unitary and hence quantum-mechanically admissible. Is is explicitly 
known, constructible with the so-called Walsh-Hadamard transformation. 

Lemma 3.1. Let i = span(L U {j?')}). Then {\wij ,\r) \ i = 1,2, ... forms an orthonormal 
basis of L. The orthogonal direct sum H = L(BL^ is an orthogonal invariant decomposition for 
both operators Ij^ and Is ■ Furthermore, 

(i) The restriction of la to L admits this real unitary matrix representation with respect to the 
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orthonormal basis \w2), ■ ■ ■ , {wi), \r)}: 

A = [Oij](<?+i)x(<?+l)i 
2 



TV' 



1 <«,J 



N 



21 
N 



(3.5) 



(a) The restriction of Ig of is '^y^±, the orthogonal projection operator onto L-^ . Conse- 
quently, Is\li- = Il^j where I-j^± is the identity operator on . 



Proof. We have, from (3.3) and (3.4) 



I. =1-2 



1 ^ 



N 



1 ^ 



N -£ 



N 



Y,\w^){w,) + \r){r 



N 



J2{\w,){r\ + \r){w,\ 



i=i j=i 

21 



,4=1 



i=l j=l 



N 



\r){r\ 



2^fW~l 
~N 



^(K)H + |r)(^.|) 



The conclusion foUows. 



(3.6) 
□ 



The generahzed "Grover search engine" for muhiobject search is now constructed as 

V = -IJl . (3.7) 

Lemma 3.2. The orthogonal direct sum Ti — L ® is an invariant decomposition for the 
unitary operator U , such that the following holds: 

(1) With respect to the orthonormal basis {\'Wi), . . . , \wi), \r)} of L, U admits the real unitary 
matrix representation 



U\l = [Mij](£+l)x(f+l), 



c 2 



2^fW^ 
TV 

TV' 



ibj^i^x - <5j,^+i), i = f + 1 or j ^ + 1, i 7^ j, 
i = j=l + \. 



(3.8) 



(2) The restriction of U to is —^i± = —Il_ 
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Proof. Substituting (3.2) and (3.6) into (3.7) and simplifying, we obtain 



U = —IsIl = ■ • ■ (simplification) 



EE - 1) + ^^E(i-':)(^ 

1=1 j=l ^ i=l 

2£ 



The lemma follows. 



□ 



Lemmas 3.1 and 3.2 above effect a reduction of the problem to an invariant subspace L. 



However, L is an (£ + l)-dimensional subspace where £ may also be fairly large. Another 
reduction of dimensionality is needed to further simplify the operator U. 

Proposition 3.3. Define V by 

V^\\v)eL : \v)^aJ2H)+b\r); a,bec\. 



Then V is an invariant two-dimensional subspace of U such that 

(1) r, s e V; 

(2) U{V) ^ V. 

Proof. Straightforward verification. 



□ 



Let \w) = ^ ^ Then |r)} forms an orthonormal basis of V. We have the second 



i=l 



reduction, to dimensionality 2. 

Theorem 3.4. With respect to the orthonormal basis \r)} in the invariant subspace V , U 
admits the real unitary matrix representation 

N-2e 2^i(N-e) ' 

- .,,,„ sin-M "^'^r.~'M . (3.9) 



U 



N 



N 



N N 



COS f sm t 
— sin 9 cos ( 



N 



Proof. Use the matrix representation (3.8) and the definition of \w) 



□ 
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Since \s) S V, we can calculate J7™|s) efficiently using 



N -e. 



N 



(by (3.3)) 



N 



N-e 
N . 



cos f sm W 

— sin 6 cos 

cos(m0 — a) 

— sm{m9 — a)] 

— cos{m9 — a) ■ {w) — sin(m0 — a) ■ \r). 
Thus, the probability of reaching the state \w) after m iterations is 

Pm — cos^ {m9 — a) . 



(3.10) 



(3.11) 



If £ N, then a is close to 7r/2 and, therefore, ( 3.11 ) is an increasing function of m initially. 
This again manifests the notion of amplitude amplification. This probability Pm is maximized 
if m6 — a = 0, implying 



m 



= the integral part of 



When £/N is small, we have 



. / 2^i{N - £) 
sm ■ 



N 



sm 



-4 



2N 8\N 



2\l-+0{{l/Nfl% 



N ^ 2 



Therefore 



A+0((£/iV)3/2) 



2Ji+0{{l/Nm 



TT N 

IVT 



(3.12) 

Corollary 3.5. The generalized Grover algorithm for multiobject search with operator U given 



by (S.l) has success probability P„j = cos {m6 ~ a) of reaching the state \w) £ L after m 



iterations. For i/N small, after m — ^^JN/l iterations, the probability of reaching \w) is close 
to 1. □ 
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The result (3.12) is consistent with Grover's original algorithm for single object search with 



l=\, which has TO w f V^; cf. (|2ll|). 



Theorem 3.6. (Boyer, Brassard, H0yer and Tapp j^). Assume that£/N is small. Then 
any search algorithm for I objects, in the form of 

UpUp-i . . . Ui\wi), 

where each Uj, j — 1,2,... ,p, is a unitary operator and \wi) is an arbitrary superposition 
state, takes in average p = 0{yj N / 1) iterations in order to reach the subspace L with a positive 
probability -P > 5 independent of N and £. Therefore, the generalized Grover algorithm in 



Corollary 3. 5 is of optimal order. 



Proof. This is the major theorem in see Section 7 and particularly Theorem 8 therein. Note 
also the work of Zalka O . □ 



Unfortunately, if the number £ of good items is not known in advance. Corollary 3.5 does 
not tell us when to stop the iteration. This problem was addressed in and in another way 
in [Q. In a related context an equation arose that was not fully solved in We consider 
it in the final segment of this paper. As in §3], consider stopping the Grover process after 
j iterations, and, if a good object is not obtained, starting it over again from the beginning. 



From Corollary 3.5 , the probability of success after j iterations is cos^ {j0 — a) . By a well-known 
theorem of probability theory, if the probability of success in one "trial' is p, then the expected 
number of trials before success is achieved will be 1/p. (The probability that success is achieved 
on the fcth trial is p{l — p)^^^ . Therefore, the expected number of trials is 

k=l k=l P VP 

which is 1/p.) In our case, each trial consists of j Grover iterations, so the expected number of 
iterations before success is 

E{j) =j-sec^{je-a). 

The optimal number of iterations j is obtained by setting the derivative E'{j) equal to zero: 

= E'{j) = sec^(j6' -a)+ 2jesec^(j0 - a) tan(j6l - a), 

2j9 = -cot{{j9-a)). (3.14) 

(In 1^, §3], this equation is derived in the form A-dj = tan((2j + 1)??), which is seen to be 



equivalent to ( 3.14 ) by noting that — ^ = ^ — a. Those authors then note that they have not 



solved the equation Mj = tan((2j + but proceed to use an ad hoc equation z = tan(z/2) 
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with z = A-dj instead.) Let us now approximate the solution j of (3.14) iteratively as foUows 



From (3.14) 



2j0sm{j6 - a) + cos{j0 - a) = 0, 



and by taking the logarithm of both sides, we obtain 

'i2ej + l 

2i[9j — a) — 2iTm + i arg 



In 



i2ej + 1 



i20j ~ 1 



(3.15) 



(3.16) 



J^ej - 1, 

for any integer n. Assume that £/N is small so that j is large, but we are looking for the smallest 
such positive j. Note that the logarithmic term in ( 3.16| ) vanishes, and 



arg 



i2ej + 1 
i2ej - 1 



-2 tan 



E 



1 

26] 



by taking n = in ( 3.16 ), we obtain 

1 

m 
1 



1 



2za-*.l+O((0j)-') 



2q+l 



The first order approximation ji for j is obtained by solving 



(3.17) 



1 



20h 



Jl- n "^1 



2^ = «' 



1 = + ^ 



20 



2). 



(3.18) 



Higher order approximations jn+i for n = 1,2,... , may be obtained by successive iterations 



1 



Jn+l 



a — tan 



1 



20J,. 



based on ( |3.14 ). This process will yield a convergent solution j to (3.14). 
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